SYSTEM AND METHOD FOR GENERATING A SERVICE PROVIDER BASED SECURE TOKEN

• US 20160359829A1
• Filed: 06/03/2015
• Published: 12/08/2016
• Est. Priority Date: 06/03/2015
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: GULLEDGE, Michael
• Granted Patent: US 9,942,217 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

Devices, systems, and methods for generating a secure token specific to an online service provider are provided. User account information of a user is transmitted to a token processor from an online service provider requesting a secure token generation. The token processor also receives exchange information for an exchange between the user and the online service provider. The token processor generates, based on the exchange information and the user account information, a secure token to be used for the exchange. The generated secure token is mapped to the online service provider and transmitted to the online service provider. The stored secure token is usable only at the mapped online service provider.

Claims

1. A method of generating an online service provider specific secure token, the method comprising:

receiving over a network, at a token processor, user account information of a user account for a user registered with an online service provider;

receiving over the network, at the token processor, exchange information for an exchange between the user and the online service provider;

generating, using a processor of a computer and based on the exchange information, a secure token to be used for the exchange;

mapping the secure token to the online service provider; and

transmitting the secure token over the network to the online service provider,

wherein the secure token is usable only at the mapped online service provider.

2. The method according to claim 1,

wherein the secure token is reusable for conducting multiple exchanges.

3. The method according to claim 1, wherein

the exchange information is received over the network, such that the exchange information bypasses the online service provider.

4. The method according to claim 1, wherein

the exchange information is received over the network from the online service provider.

5. The method according to claim 4, wherein

the exchange information is deleted at the online service provider.

6. The method according to claim 1, wherein

mapping information that maps a relationship between the secure token and the online service provider is stored at the online service provider.

7. The method according to claim 6, wherein

mapping information that maps a relationship between the secure token and the user account information is stored at the online service provider.

8. The method according to claim 1, further comprising:

receiving over the network, from a requesting online service provider, the secure token;

determining, by the token processor, whether the secure token is mapped to the requesting online service provider;

if the secure token is determined to be mapped to the requesting online service provider, retrieving exchange information mapped to the secure token, and authorizing the exchange using the exchange information; and

if the secure token is determined not to be mapped to the requesting online service provider, denying the exchange.

9. The method according to claim 8, further comprising:

determining whether the secure token is being used by a user account mapped to the secure token.

10. The method according to claim 8, further comprising:

if the secure token is determined to be mapped to the requesting online service provider,

determining whether the retrieved exchange information mapped to the secure token has sufficient balance to process the exchange.

11. The method according to claim 8, further comprising:

if the secure token is determined not to be mapped to the online service provider, notifying the online service provider mapped to the secure token of the denied exchange.

12. The method according to claim 1, further comprising:

verifying identification of the user when receiving the exchange information.

13. The method according to claim 1, further comprising:

establishing a secure channel with the user for receiving the exchange information.

14. The method according to claim 13, wherein the establishing of the secure channel is initiated by the token processor.

15. The method according to claim 1, wherein among the secure token and the exchange information, the online service provider has access only to the secure token.

16. The method according to claim 1, wherein the secure token is mapped to only one online service provider.

17. The method according to claim 1, wherein the online service provider stores either the exchange information or the secure token, but not both.

18. The method according to claim 1, wherein the exchange information is received only at the token processor among the token processor and the online service provider.

19. A tangible non-transient computer readable storage medium that stores a computer program, the computer program, when executed by a processor, causing a computer apparatus to perform a process comprising:

receiving over a network, at a token processor, user account information of a user account for a user registered with an online service provider;

receiving over the network, at the token processor, exchange information for an exchange between the user and the online service provider;

generating, using a processor of a computer and based on the exchange information, a secure token to be used for the exchange;

mapping the secure token to the online service provider; and

transmitting the secure token over the network to the online service provider,

wherein the secure token is usable only at the mapped online service provider.

20. A computer apparatus, comprising:

a memory that stores instructions, and

a processor that executes the instructions,

wherein, when executed by the processor, the instructions cause the processor to perform operations comprising;

receiving over a network, at a token processor, user account information of a user account for a user registered with an online service provider;

receiving over the network, at the token processor, exchange information for an exchange between the user and the online service provider;

generating, using a processor of a computer and based on the exchange information, a secure token to be used for the exchange;

mapping the secure token to the online service provider; and

transmitting the secure token over the network to the online service provider,

wherein the secure token is usable only at the mapped online service provider.